Report Overview
Visitedpublic
2025-01-18 07:09:15
Tags
Submit Tags
URL
github.com/TypicaIity/Xeno-Bootstrapper/releases/latest/download/Xeno.Bootstrapper.exe
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.3
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
github.com
14232007-10-092016-07-132025-01-15
objects.githubusercontent.com
1340602014-02-062021-11-012025-01-15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/904926306/c0397ec6-ce6f-439d-849b-51472d57aae8?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250118T070849Z&X-Amz-Expires=300&X-Amz-Signature=e840eba3f6f5d69fe08e78581196f4c83f2ee73431cada7e51417e1821d6319d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno.Bootstrapper.exe&response-content-type=application%2Foctet-streamDetect pe file that no import table

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/904926306/c0397ec6-ce6f-439d-849b-51472d57aae8?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250118T070849Z&X-Amz-Expires=300&X-Amz-Signature=e840eba3f6f5d69fe08e78581196f4c83f2ee73431cada7e51417e1821d6319d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno.Bootstrapper.exe&response-content-type=application%2Foctet-stream
IP / ASN
185.199.111.133
#54113 FASTLY
File Overview
File TypePE32+ executable (console) x86-64, for MS Windows, 10 sections
Size786 kB (786432 bytes)
MD5097ed6a8b5a4e862334069aee7a4b2a4
SHA1e7ad0e7f163d3e9dc8776e326c98a99985aba9fd

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detect pe file that no import table

JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize
GET github.com/TypicaIity/Xeno-Bootstrapper/releases/latest/download/Xeno.Bootstrapper.exe
140.82.121.3302 Found0 B
GET github.com/TypicaIity/Xeno-Bootstrapper/releases/download/v6/Xeno.Bootstrapper.exe
140.82.121.3302 Found0 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/904926306/c0397ec6-ce6f-439d-849b-51472d57aae8?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250118%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250118T070849Z&X-Amz-Expires=300&X-Amz-Signature=e840eba3f6f5d69fe08e78581196f4c83f2ee73431cada7e51417e1821d6319d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DXeno.Bootstrapper.exe&response-content-type=application%2Foctet-stream
185.199.111.133200 OK786 kB